Skip to content

Instantly share code, notes, and snippets.

View komodoooo's full-sized avatar
♾️
Learning

komodo komodoooo

♾️
Learning
View GitHub Profile
@komodoooo
komodoooo / gl.rb
Created July 23, 2023 18:01
CVE-2023-34598 exploit
require 'http'
require 'openssl'
puts """
CVE-2023-34598
Gibbon v25.0.0 LFI exploit
By komodo\n
"""
=begin
@komodoooo
komodoooo / scr.rb
Created July 25, 2023 09:15
CVE-2023-23333 exploit
require 'http'
require 'openssl'
puts """
CVE-2023-23333
SolarView Compact <=6.00 RCE exploit
By komodo\n
"""
=begin
@komodoooo
komodoooo / cbp.rb
Created August 13, 2023 13:16
CVE-2023-37265 exploit via XFF bypass
require 'http'
require 'openssl'
require 'json'
puts """
CVE-2023-37265
CasaOS <0.4.4 Path traversal Exploit
By komodo
"""
@komodoooo
komodoooo / mrl.rb
Created October 8, 2023 14:08
CVE-2023-43261 exploit
require 'http'
require 'openssl'
puts """
CVE-2023-43261
Milesight routers information disclosure exploit
By komodo\n
"""
=begin
@komodoooo
komodoooo / v3r.rb
Created October 29, 2023 14:32
CVE-2023-45852 exploit
require 'http'
require 'openssl'
require 'json'
puts """
CVE-2023-45852
Viessmann Vitogate 300 RCE exploit
By komodo\n
"""
@komodoooo
komodoooo / fwab.js
Created May 8, 2024 18:18
CVE-2024-31621 exploit
/* CVE-2024-31621
Flowise 1.6.5 <= Authentication Bypass
By komodo
Usage: Navigate to a page that does not require auth (ex: /tools),
then inject this code inside dev tools console.
Shodan dork: http.favicon.hash:-2051052918
*/
var req = XMLHttpRequest.prototype.open;
@komodoooo
komodoooo / rgdr.rb
Created August 3, 2024 20:47
CVE-2024-7120 exploit
require 'http'
require 'openssl'
puts """
CVE-2024-7120
Raisecom gateway RCE exploit
By komodo\n
"""
=begin
@komodoooo
komodoooo / stredit.c
Created November 9, 2024 15:02
Edit strings in binary files
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
int main(int argc, char *argv[]){
FILE * f = fopen(argv[1], "rb+");
fseek(f, 0, SEEK_END);
unsigned long long int size = ftell(f);
fseek(f, 0, SEEK_SET);
unsigned char *data = (unsigned char *)malloc(size);
@komodoooo
komodoooo / mulino.py
Created December 11, 2024 18:43
Generate musical instrumentals using Gradio and Facebook MusicGen AI models
import gradio as gr
from os import mkdir
from random import random
from audiocraft.models import MusicGen
from audiocraft.data.audio import audio_write
try:
mkdir("logs")
except FileExistsError:
pass
@komodoooo
komodoooo / wally.py
Created December 20, 2024 20:12
Chat interface with the Qwen 2.5 LLM built with Gradio
import gradio as gr
from transformers import AutoModelForCausalLM, AutoTokenizer
MODEL_ID = "Qwen/Qwen2.5-1.5B-Instruct" # Qwen/Qwen2.5-7B-Instruct, Qwen/Qwen2.5-32B-Instruct
class QwenInterface:
def __init__(self):
self.messages = [{"role": "system", "content": "You're a usefull assistant who answers to everything."}]
self.model = AutoModelForCausalLM.from_pretrained(MODEL_ID, torch_dtype="auto", device_map="auto")
self.tokenizer = AutoTokenizer.from_pretrained(MODEL_ID)